ルータ化

http://netlog.jpn.org/r271-635/2013/04/raspberry_pi_wifiap_router.html

# apt-get install ifmetric

(IP forwardの設定)

# vi /etc/sysctl.conf
----
net.ipv4.ip_forward=1

または･･･

# echo 1 >/proc/sys/net/ipv4/ip_forward

(ifのmetricを設定して優先順位)

# vi /etc/dhcpcd.conf
interface bond0
metric 10
interface eth1
metric 0

(iptablesの設定)

# vi /etc/network/if-pre-up.d/iptables
#!/bin/sh
iptables -F -t nat
iptables -t filter -F
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
iptables -A FORWARD -i eth1 -o bond0 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i bond0 -o eth1 -j ACCEPT

# chmod 755 /etc/network/if-pre-up.d/iptables

(interfacesの設定) ！！これを設定するとNG！！

# vi /etc/network/interfaces
iface eth1 dhcp

(参考: iproute2の操作)

ip link list (リンク表示)
ip address show (IP表示)
ip route show (経路表示)
ip rule list (ルール表示)
ip route list table main (テーブル表示)
ip rule add from 10.0.0.10 table John (テーブル追加)
ip route add default via 195.96.98.253 dev ppp2 table John (テーブルへエントリを追加)
ip route add default via 10.137.40.1 dev eth1  table main metric 210
ip route flush cache　(更新を反映)

http://www.ems.jp/Raspberry_Pi/install.html

★hostapd

$sudo apt-get install hostapd

$vi /etc/network/interfaces
auto lo
iface lo inet loopback
allow-hotplug eth0
iface eth0 inet static
address 192.168.1.99
netmask 255.255.255.0
gateway 192.168.1.1

# auto wlan0
iface wlan0 inet static
address 192.168.0.1
netmask 255.255.255.0
gateway 192.168.0.1

$vi /etc/hostapd/hostapd.conf 
interface=wlan0
driver=nl80211

ssid=myap
hw_mode=g
channel=1

wpa=2
wpa_passphrase=stoneshark
wpa_key_mgmt=WPA-PSK
wpa_pairwise=TKIP
rsn_pairwise=CCMP

$vi /etc/init.d/hostapd
----
DAEMON_CONF=/etc/hostapd/hostapd.conf

$vi /etc/sysctl.conf 
----
kernel.printk = 3 4 1 3

net.ipv4.conf.default.rp_filter = 1
net.ipv4.tcp_syncookies = 1
net.ipv4.ip_forward = 1

vm.swappiness=1
vm.min_free_kbytes = 8192

内側を指定する

http://netlog.jpn.org/r271-635/2013/04/raspberry_pi_router.html

$vi /etc/network/if-pre-up.d/iptables
----
#!/bin/sh
iptables -F -t nat
iptables -t nat -A POSTROUTING -o eth0 -j MASQUE

$ sudo chmod 755 /etc/network/if-pre-up.d/iptables

$sudo apt-get install isc-dhcp-server
$ vi /etc/dhcp/dhcpd.comf
----
ddns-update-style none;
option domain-name "example.org";
option domain-name-servers ns1.example.org, ns2.example.org;
default-lease-time 6000;
max-lease-time 72000;
subnet 192.168.0.0 netmask 255.255.255.0 {
      range 192.168.0.11 192.168.0.200;
      option domain-name-servers 8.8.8.8, 8.8.4.4;
      option domain-name "lan";
      option routers 192.168.0.1;
      option broadcast-address 192.168.0.255;
}

#vi /etc/default/isc-dhcp-server
----
INTERFACES="wlan0 eth1"
#eth0かeth1かwlan0か、要チェック

#vi /etc/default/isc-dhcp-server
INTERFACES="wlan0 eth1"

# vi /etc/dhcp/dhcpd.conf
----
subnet 192.168.20.0 netmask 255.255.255.0 {
  range 192.168.20.10 192.168.20.20;
  option broadcast-address 192.168.20.255;
  option routers 192.168.20.1;
  default-lease-time 600;
  max-lease-time 7200;
  option domain-name "local-20";
# option domain-name-servers 8.8.8.8, 8.8.4.4;
  option domain-name-servers 192.168.20.1;
}

subnet 192.168.21.0 netmask 255.255.255.0 {
  range 192.168.21.10 192.168.21.20;
  option broadcast-address 192.168.21.255;
  option routers 192.168.21.1;
  default-lease-time 600;
  max-lease-time 7200;
  option domain-name "local-21";
# option domain-name-servers 8.8.8.8, 8.8.4.4;
  option domain-name-servers 192.168.21.1;
}

# service isc-dhcp-server restart